140 likes | 520 Views
Your Inbox To Go BBAuth and the Yahoo! Mail API Dan Theurer, Technical Evangelist, Yahoo! Developer Network Ryan Kennedy, Tech Lead, Y! Mail UK Hackday, London , CA June 16th 2007 2007 It’s about data Provide programmatic access to data that is stored on Yahoo!
E N D
Your Inbox To GoBBAuth and the Yahoo! Mail API Dan Theurer, Technical Evangelist, Yahoo! Developer Network Ryan Kennedy, Tech Lead, Y! Mail UK Hackday, London , CA June 16th 2007 2007
It’s about data Provide programmatic access to data that is stored on Yahoo! -> Web service • Integration (Internal / External / Partners) • Enable users to consume data in their own way • Mixing and Remixing Content. • Beyond the browser: mobile, desktop, etc. http://developer.yahoo.com
del.icio.us Yahoo! APIs http://developer.yahoo.com
The Power of Authentication • At this point it gets really interesting. Not only can you write at that point but you can get personalized content. • Authenticated APIs • Your Bookmarks • Your Events • Your Photos • Your Mail - New • Y! Mail is the biggest online email platform with over 250 million users. • A multiple of that in total registered users http://developer.yahoo.com
Browser Based Authentication • Access to user specific data • It can be used to log in to third-party applications with a Yahoo! ID. • SSO was an easy add, main idea was to provide access to YOUR data • Similar to Flickr Auth • Recent similar implementations are • OpenAuth from AOL • Windows Live ID from Microsoft. http://developer.yahoo.com
Single Sign-Onidproxy.net - menuism.com - buxfer.com http://developer.yahoo.com
How Browser-Based Authentication Works http://developer.yahoo.com
BBAuth Demo http://developer.yahoo.com
foo.net mail.yahooapis.com BBAuth Application Flow In the re-direct to the application’s success URL, Yahoo includes a token and if requested a userhash The calls are signed with the secret issued by Yahoo. md5(relativePath, appid, ts, secret) Application submits signed appid and token cookie + WSSID (in response body) foo.net api.login.yahoo.com Endpoint?appid=xyz&WSSID=123 and cookie in header • cookies are valid for one hour • foo.net can re-submit token for a fresh cookie for up to 14 days Data
Contact Yahoo! Developer Network Blog http://developer.yahoo.com/blog My Info http://theurer.cc/blog dan@yahoo-inc.com Slides http://theurer.cc/talks/2007ukhackday.ppt http://developer.yahoo.com